Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Support CWE ID in reports

Jose | Last updated: Jun 30, 2016 12:36PM UTC

Like other professionals, we use CWE for classify vulnerabilities. In our case we try to use several tools and correlate vulnerabilities in this way. Thank to that we can create custom reports using our description of vulnerabilities, and if we need to deliver reports in other language, we can keep our translations.

Liam, PortSwigger Agent | Last updated: Jun 30, 2016 01:04PM UTC

Hi Jose Thanks for your message. Burp doesn't currently classify its Scanner issues relative to the CWE standards. We might add this feature in future (and mappings to other standards too) but we can't currently promise an ETA for this, sorry. You can view all of Burp's issue types here – https://portswigger.net/KnowledgeBase/Issues/. Please let us know if you need any further assistance.

Burp User | Last updated: Nov 23, 2018 11:42AM UTC

May i know whether the burp vulnerabilities are classified into any security standards (OWASP/CWE) ? Also please confirm whether the burp scanner covers all the OWASP top 10 2017 vulnerabilities ?

Liam, PortSwigger Agent | Last updated: Nov 23, 2018 11:52AM UTC